Use-After-Free Vulnerability in Linux Kernel During NTFS3 Filesystem Mount

CVE-2025-39691

What is CVE-2025-39691?

A use-after-free vulnerability was identified in the Linux kernel which can lead to potential stack overflow issues. This occurs during the handling of NTFS3 filesystem mounts, specifically when the bh_read() function is called. The vulnerability arises when buffer heads are improperly managed. If not allocated correctly, freeing these resources can lead to data corruption and system instability. Affected users are encouraged to apply necessary patches to prevent potential threats.

References